Hello,First time, long time.My organization has decided to move away from Carbon Black in favor of Falcon. I used CrowdStrike's directions and successfully created a config profile and a policy. Both have been tested and are working. My predecessor had created a policy to remove Carbon Black and it works as expected.My question - What is the best way to go about deploying this? My idea is to scope the config profile to every machine, create a smart group that identifies endpoints with the Falcon config profile installed, and uninstall Carbon Black. Then create another smart group that identifies endpoints with the Falcon config profile installed that do not have Carbon Black installed and scope the Falcon installation policy to the group. Once all endpoints have received the Falcon package, I will remove the old Carbon Black config profile.Is this the best way to do this or is there another method that you'd recommend?Thanks in advanced!

We have the problem that we cannot activate Jamf Trust on any of our Windows computers (all Lenovo devices).As described in the help, we install Trust via a "Generic UEM for Windows" installation.Trust is installed correctly, but activation does not work. We have also tried to insert the "Shareable link" directly into the application, but the same behavior, the message always appears, activation is not possible, please contact the administrator.But we cannot recognize any error. We have also tried different networks (Wifi & LTE) and also with cable.So it is currently not possible for us to roll out new computers, as protection by Trust on a Windows basis is currently not possible.We are currently working to identify next steps needed to move the case forward.

Hi Everyone  is there a way to push a url to all macbooks like webclip for IOS ? Thanks 

Hello, we use jamf pro to manage our macbook airs.One of our main concerns is we do not want students to sign in with a personal account when using chrome browser. I have been looking to see if that could be done using the google admin console and I have been told that I could create a configuration profile in jamf to do this. How can this be done with a configuration profile? Thanks

Trying to configure a login window message with configuration profile? Any ideas

Hello! I'm looking for a way to disable the audio on an iPad's lock screen. I'm having an issue where a student is watching a YouTube video with a timer set on a break, timer goes off, iPad gets locked, and the audio from the video that is able to still be played from the built-in player on the lock screen causes classroom problems. I've tried two Config Profiles that didn't work--one that restricts the Apple Music app, one that restricts AirPlay receiving--but I'm not even sure if doing this is possible. Would love to hear any solutions or insights anyone might have! Thank you.

Hi , We have recently updated our VPN and would like to update our host address for all macbook across the company through JAMF. I know we can package the profile.xml with cisco any connect installer and assign the profile to everyone but we dont want to go that path. Is there a way we can update the host address on all cisco any connect instances for all users much simpler way via jamf ?Thanks,

Hi everyone,I found some previous articles regarding a similar issue of a device being encrypted (shows on the device as encrypted) and JAMF Pro showing it has the Recovery Key. But JAMF Pro also shows it is not encrypted. I have been able to fix this by manually running the command sudo fdesetup changerecovery -personal and then doing a JAMF Recon. I wanted to script this, so I created a script to be run from self-service, but it just spins forever. I believe because it needs me to provide a username and password for an account that has rights to Filevault. How would I prompt for that in my script? #!/bin/sh# Change the recovery keysudo fdesetup changerecovery -personal# Force device to check into Jamfsudo jamf reconexit 0

I was having trouble getting ANY VPP apps to deploy on Big Sur machines. I discovered that in Big Sur, in the "Restrictions" configuration profile, I had to UNtick "Require admin password to install or update apps". This was not needed in Catalina, but VPP apps will not deploy on our Big Sure Macs unless this box is unticked. See attached screenshot. Hope this helps someone!

I package Figma desktop application after download the app as .dmg via composer and deployed thorugh policy with no issue. It was working fine on macOS Monterey but after upgrade to Ventura it is not working saying corrupted. I also tried to re-install from policy still get same error. But if I right click the app icon from docker and click "open" a new window pop up from there if I click open again that will launch Figma desktop and this need to do for the 1st time after upgrade. Any suggestion for that. Any one know how I can kipp Figma process running that way i will script to remove the Figma App from /Applications folder and re-install to see that resolve the issue or not.

Hi,  I am trying to deploy a new plist from JAMF but this one contains <array> and it failed to deploy.here the example :<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array>  <dict>    <key>organization</key>    <string>company1</string>    <key>display_name</key>    <string>C1</string>    <key>onboarding</key>  &n

Good Afternoon!I'm not sure if someone could help me figure out what is going on with this. We are currently deploying the CrowdStrike Falcon Sensor in our environment, and have a policy that pushes out the install package and a script. The install package works without issue, but we are having some issues with the script.When the endpoint is licensed already, the script returns a failed status code and a status message as to why it failed in Jamf ("ERROR: The machine is already licensed"), but does not return that message in the script so we can tell it to succeed in the case that it is already licensed. #!/bin/sh # THIS SCRIPT LICENSES THE CROWDSTRIKE FALCON SENSOR RESULT=$(/Applications/Falcon.app/Contents/Resources/falconctl license "$4") echo " OUTPUT: ${RESULT} " Which results in the following:Script result: Error: This machine is already licensed OUTPUT: Any idea what is going on h

Hi,every now and then I come across a Mac which stopped communicating with the Jamf server and Apple's MDM.As our MDM profile is non-removable I have the question how to uninstall it? Sending the MDM-removal command obviously will not work nor jamf removeMDMProfile.Any ideas?

Hi all,I have a machine consistently producing the error below in the jamf log - does anyone have any info that might help?jamf[925]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.management.daemon.binary was invalidated from this process." UserInfo={NSDebugDescription=The connection to service named com.jamf.management.daemon.binary was invalidated from this process.}I've pasted the full loop of log entries below (starred out username).For context, the 'Google Chrome - Install & Update' policy is one of a few similar scripts that use Installomator (plus variables) to install some apps not on the Mac App Store.jamf[10839]: Checking for policies triggered by "recurring check-in" for user "*******"... jamf[10839]: Executing Policy Google Chrome - Install & Update jamf[10839]: Checking for patches... jamf[10839]: No patch policies were found. jamf[10839]: Error Domain=NSCocoaErrorDomain Code=4099

Does the new feature macOS Onboarding support Jamf App Installers? Why Using Installomator etc. for Basic Apps like Office365 and so on. But in the Settings of Onboarding there is no way to include App Installers or am looking wrong? And when I am going to use the new feature, do I have to put the policy in Self Service for initial Setup?

Hello,We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible. 

Hi Folks. I've been put on the job of designing Jamf configuration profiles and policies for my environment. Jamf is totally new to me so I'm starting from the ground up with their Jamf training modules. The infrastructure has already been put in place by the main campus techs at our university. They've already made me a production environment for our college, so I feel that most of the heavy lifting is already complete.Could you share any thoughts that would be helpful to me while I go through this process? What are best practices for working with the MDM? What are mistakes you made? How should I start off on the right foot? Are there any crucial best practices that I should know about from the start? Etc. etc.

It pays to stay at JNUC until the very end. The last session at JNUC 2019 gave me the inspiration to finally solve the issue of finding duplicate computer serial numbers using Splunk. This is extremely helpful in finding computer records after a computer has had a mainboard replaced by Apple. The Serial Number is the same, but a new JSS Computer ID is created. Download the .tgz here:https://www.splunk.com/en_us/download/splunk-enterprise.html#tabs/macos*The .dmg didn't seem to install properly for me, but the .tgz did. Create a read-only user in JamfPro that Splunk can use to access an Advanced Search. Create an Advanced Search whereCriteria "Managed Is Managed" or "Managed Is Unmanaged".Display: Serial Number, Computer Name, and JSS Computer ID. Install the Jamf Pro Add-On and configu

Recently new MacBook Pros have been presenting an empty dock after user enrollment. I cannot find any setting that would make this happen. Seems to only happen on brand new computers and not re-provisioned computers. Jamf Pro Version11.2.0-t1705676508

Optimized to leverage SYM-Helper (1.1.1), Setup Your Mac (1.14.0) leverages new features of swiftDialog (2.4.0) Introduction Apple's Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with "zero touch." Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment. Continue reading …

Just upgraded to Jamf Pro 10.5. When I run a quickadd.pkg or enroll via Jamf Recon, everything works perfectly except running jamf commands from the terminal. I run any of the following commands the terminal returns with "sudo: jamf: comand not found": sudo jamf reconsudo jamf policysudo jamf enroll -promptsudo jamf manage Has anyone else run into this issue? I'm using the thin image method, so the quikadd.pkg & recon are vital to my process. OS is currently High Sierra 10.13.5

We have an environment that already is set up for Apple devices.  I don’t know anything about how it is setup or what any of the configuration looks like.  My question is how do I enroll a new iPad into the application Jam Pro and is there a limit on how many devices can be setup? I think but I am not sure this application houses two departments' worth of devices mine and another department, and I am not sure how to differentiate between mine and theirs except by the serial but as far as I know, there is no information telling me what our serial’s numbers are.  So another question how can I tell which are mine and which are not, it seems like they are all dumped into the same area. These iPads are brand new out of the box, usually with iPad previously managed when they were wiped during the iPad setup we would get to a point where you would put in a username and password to connect to the MDM at which point I am guessing the MDM config would sy

I'm attempting to create a script to remove .app files from User's trash bins. I have the following script that is returning "No such file or directory."  #!/bin/bash# for each user in the /Users folder that is (!)not the Shared folderfor dir in /Users/[!Shared]*do# Create a variable with just the users nameloggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) # Delete app files from the currect user's trashrm -R /Users/${loggedInUser}/.Trash/*.app # For logs or viewing progress--shows when the users trash has been emptiedecho -e ".app files removed from Trash for: ${loggedInUser}"doneHas anyone done something like this?

Hello everyone!I've added a MAC via BYOD and user auto enrolment, but the Self Service portal won't deploy despite enabling/disabling setting and forcing policy updates on the MAC.I can't find any trace of a deployment attempt in /var/log/jamf.log. Do you have any leads or ideas?Thanks a lot! 

When creating a new Extension Attribute, I don't have the option to set the input type to "Script" I've been trying to create a smart group based on "uptime," but each guide that I go over says to set the extension input type to "Script"Am I missing something? Am I in the wrong place?Thank you!